Blocked user can push into own repo

Created by: zzet

https://github.com/gitlabhq/gitlabhq/blob/master/app/models/ability.rb#L44-L46

  • Create user test_user
  • Login as test_user
  • Add own key
  • Create project test_project
  • Logout
  • Login as Admin
  • Block user test_user ....

User test_user can push code and clone code after block :(